$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/33/IqP9jgXXIRv55kPe91oV7nmV4tc.roa File: IqP9jgXXIRv55kPe91oV7nmV4tc.roa (raw, json) Hash identifier: kSYedcy935qe2R/014+D7Jb/zxD1KlqfIMqYDVmXNBg= Subject key identifier: 22:A3:FD:8E:05:D7:21:1B:F9:E6:43:DE:F7:5A:15:EE:79:95:E2:D7 Certificate issuer: /CN=2C0314DFDED41AB611D99F542063982FE38080BA Certificate serial: 080B Authority key identifier: 2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/IqP9jgXXIRv55kPe91oV7nmV4tc.roa Signing time: Fri 23 May 2025 07:17:21 +0000 ROA not before: Fri 23 May 2025 07:17:21 +0000 ROA not after: Fri 03 Apr 2026 08:00:09 +0000 asID: 9808 IP address blocks: 223.160.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C0314DFDED41AB611D99F542063982FE38080BA Validity Not Before: May 23 07:17:21 2025 GMT Not After : Apr 3 08:00:09 2026 GMT Subject: CN=22A3FD8E05D7211BF9E643DEF75A15EE7995E2D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c8:da:9b:a8:c5:8c:4d:6d:a7:7a:f0:1c:9b: b7:d7:20:8d:41:23:80:58:95:60:ac:09:3c:7f:b2: 86:ca:6c:28:96:3d:fe:90:fa:52:15:18:2b:4d:53: 70:3c:d6:c8:b2:bf:c0:bf:0a:a7:19:17:da:dc:c9: 41:89:93:fb:b5:96:2d:55:36:ef:9a:c3:f4:ab:eb: 2d:d2:c1:7f:3d:e9:85:37:0e:25:ba:cd:c0:4d:40: f7:75:7d:ab:19:aa:ad:ff:6e:18:d2:11:27:1a:9c: 4f:f2:27:55:81:0c:ee:8d:64:85:fd:f4:87:c0:28: 86:02:68:ba:ee:0c:7a:73:ee:5f:fd:98:24:3b:a4: 97:73:76:38:b0:2e:96:96:fa:9b:5f:05:43:db:04: 26:f6:05:2f:74:ba:cf:1e:51:39:55:e8:2e:3b:c9: 30:f9:57:2a:2f:ca:0e:87:00:a5:85:62:4f:3f:26: 08:02:a4:47:1c:a6:f4:21:0a:f2:1b:48:f0:a6:50: 73:11:0e:56:7a:eb:c1:ed:36:1c:21:2f:c2:34:06: f9:1f:c3:13:ca:39:21:28:b2:37:29:3f:34:19:11: 38:7c:06:6c:20:52:a0:b6:88:66:c8:22:37:29:48: bc:15:7c:74:a4:70:73:be:20:a7:12:c5:5e:4b:eb: f5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A3:FD:8E:05:D7:21:1B:F9:E6:43:DE:F7:5A:15:EE:79:95:E2:D7 X509v3 Authority Key Identifier: keyid:2C:03:14:DF:DE:D4:1A:B6:11:D9:9F:54:20:63:98:2F:E3:80:80:BA X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/LAMU397UGrYR2Z9UIGOYL-OAgLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LAMU397UGrYR2Z9UIGOYL-OAgLo.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/33/IqP9jgXXIRv55kPe91oV7nmV4tc.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 223.160.236.0/23 Signature Algorithm: sha256WithRSAEncryption 57:f8:aa:bc:4f:2d:76:54:25:04:4d:ec:98:3d:0e:57:2e:83: 3e:c4:25:46:87:e6:d3:86:d8:72:9d:5a:94:01:8d:66:99:44: 9f:e3:1b:6f:96:ee:a5:4d:db:57:ac:79:e7:ef:80:81:d7:8c: d6:ff:7f:87:97:28:b2:b6:fa:45:33:f8:42:03:61:b6:ee:03: 89:67:fb:4d:e5:9a:1f:6c:2c:9f:19:a6:38:6b:ea:4c:18:92: 86:8f:4b:43:03:64:3e:26:87:60:93:cb:4b:b0:7a:1f:ab:84: 88:88:ad:9e:39:72:88:77:d2:82:88:c6:24:10:3d:9b:6d:31: cf:0d:70:b3:e1:c6:9a:2a:00:af:39:47:97:f6:53:04:e3:33: e8:1c:2c:e3:66:52:9d:c1:08:d1:3a:e5:df:52:f7:8f:ca:ce: e2:25:b6:79:be:88:1e:70:96:e1:1c:92:bb:e3:e5:c4:25:dd: e2:81:57:88:d8:4e:15:c5:ca:27:ce:e7:b7:b3:a6:0b:44:a8: 49:14:26:40:55:fd:4d:8c:4b:7d:77:4b:68:26:e7:ea:ad:2a: f6:96:5f:13:18:d4:cd:93:94:f0:99:76:f4:42:c4:f6:a0:fc: fe:17:d6:66:2e:11:c1:da:0b:36:f2:10:c6:c2:46:4d:56:13: 9b:8a:3b:c0 -----BEGIN CERTIFICATE----- MIIE0zCCA7ugAwIBAgICCAswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkMw MzE0REZERUQ0MUFCNjExRDk5RjU0MjA2Mzk4MkZFMzgwODBCQTAeFw0yNTA1MjMw NzE3MjFaFw0yNjA0MDMwODAwMDlaMDMxMTAvBgNVBAMTKDIyQTNGRDhFMDVENzIx MUJGOUU2NDNERUY3NUExNUVFNzk5NUUyRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDlyNqbqMWMTW2nevAcm7fXII1BI4BYlWCsCTx/sobKbCiWPf6Q +lIVGCtNU3A81siyv8C/CqcZF9rcyUGJk/u1li1VNu+aw/Sr6y3SwX896YU3DiW6 zcBNQPd1fasZqq3/bhjSEScanE/yJ1WBDO6NZIX99IfAKIYCaLruDHpz7l/9mCQ7 pJdzdjiwLpaW+ptfBUPbBCb2BS90us8eUTlV6C47yTD5Vyovyg6HAKWFYk8/JggC pEccpvQhCvIbSPCmUHMRDlZ668HtNhwhL8I0BvkfwxPKOSEosjcpPzQZETh8Bmwg UqC2iGbIIjcpSLwVfHSkcHO+IKcSxV5L6/WPAgMBAAGjggHvMIIB6zAdBgNVHQ4E FgQUIqP9jgXXIRv55kPe91oV7nmV4tcwHwYDVR0jBBgwFoAULAMU397UGrYR2Z9U IGOYL+OAgLowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzMv TEFNVTM5N1VHcllSMlo5VUlHT1lMLU9BZ0xvLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC9MQU1VMzk3VUdyWVIyWjlVSUdPWUwtT0FnTG8uY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMy9JcVA5amdYWElSdjU1a1Bl OTFvVjdubVY0dGMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 36DsMA0GCSqGSIb3DQEBCwUAA4IBAQBX+Kq8Ty12VCUETeyYPQ5XLoM+xCVGh+bT hthynVqUAY1mmUSf4xtvlu6lTdtXrHnn74CB14zW/3+HlyiytvpFM/hCA2G27gOJ Z/tN5ZofbCyfGaY4a+pMGJKGj0tDA2Q+Jodgk8tLsHofq4SIiK2eOXKId9KCiMYk ED2bbTHPDXCz4caaKgCvOUeX9lME4zPoHCzjZlKdwQjROuXfUvePys7iJbZ5voge cJbhHJK74+XEJd3igVeI2E4Vxconzue3s6YLRKhJFCZAVf1NjEt9d0toJufqrSr2 ll8TGNTNk5TwmXb0QsT2oPz+F9ZmLhHB2gs28hDGwkZNVhObijvA -----END CERTIFICATE-----Generated at Wed Jun 4 01:07:54 2025 by rpki-client